Fix #289

Instead of using internal details of the `createsuperuser` script, the validations framework can validate the input with the corresponding `django.contrib.auth.User` fields.